Skip to content
PeakSteps PeakSteps
Daily Bread Why it works The rhythm Support Get the free app

What we hold, and what we never touch

Privacy Policy

Last updated 9 November 2026

PeakSteps is a free Bible app for men. What a man writes in it is his own, so we built the app to never receive it. This policy is the plain version of that design. It applies to the PeakSteps app and to peaksteps.app.

The short version

  • Anything you write in the app, and any photo you add, stays on your device. We never receive it.
  • Your account holds your identity only: the email Google or Apple gives us, and an account id.
  • Only your progress syncs: start dates, the furthest day you reached, which days you have done, and any fasting timers. Numbers and dates. No words.
  • No ads. We do not sell data. There are no third-party ad trackers in the app.
  • You can delete your account and everything we hold, from inside the app, at any time.

Who we are

PeakSteps is built and run by Peak Software (Pty) Ltd, a company registered in South Africa. We are the responsible party under South Africa's Protection of Personal Information Act (POPIA), and the controller if you are in the EU or UK. Our Information Officer can be reached at support@peaksteps.app.

What stays on your device

Prayers, notes and reflections you write, any highlights or marks you make, and any photos you add are stored only in the app's private storage on your phone. They are never uploaded and never backed up to us. Our database has nowhere to put them: the cloud record has a fixed set of numeric fields, and our server rules reject any write that contains anything else. Uninstalling the app removes this data.

What we hold in your account

Signing in is required, and Google and Apple are the only options. From them we receive your email address, your display name if the provider shares one, and an account identifier. If you use Apple's Hide My Email, we only see the relay address. We never see your password.

What syncs to the cloud

One record per account. It holds the date you started, the date your daily readings began, the furthest day you have reached, the numbers of the days you have completed, and the start times and targets of any fasts you run. That is the whole list. It exists so a new or lost phone does not cost you your progress. Our rules tie the record to your account and refuse everyone else.

Content we send you

Daily Bread chapters, notes and narration are downloaded from our servers as you need them. That is our content travelling to you. Nothing travels back.

Analytics and crash reports

We use Google Firebase Analytics and Crashlytics to see whether the app works and where it breaks. They record the shape of an action, never its content: that a screen was opened, that a day was completed and its number, which sign-in provider was used, how long the app took to start, and technical details of a crash. Your words and photos are never part of any event. These tools process device and usage identifiers as described in Google's privacy policy.

Who else is involved

Google (Firebase Authentication, Cloud Firestore, Analytics and Crashlytics) processes the data above on our behalf. Apple processes Sign in with Apple. The app stores process your download. Nobody else receives your data, and we never sell it.

Where it is stored

Firebase may store and process data on servers outside South Africa, including in the United States and the EU. Google is bound by data-processing terms that give your information protection comparable to POPIA and the GDPR. We rely on those terms for any cross-border transfer.

How long we keep it

Your account and its progress record are kept until you delete your account. Delete it in the app (Your account, then Delete account) and both are erased. Data on your own phone stays until you remove it or uninstall. Analytics and crash data are kept on Firebase's standard schedule and are never linked to anything you wrote.

Why we are allowed to hold it

We process your account details and progress record to provide the service you signed up for. Analytics and crash reporting rest on our legitimate interest in knowing whether the app works, kept narrow: shape only, never content. We never process anything you write, so we never need your consent to do so.

Your rights

You can see what we hold about you in the app and delete all of it there. You may also ask us for access, correction, deletion, a copy in a portable form, or to object to or restrict processing. Write to us and we will act within 30 days, free of charge. You can complain to South Africa's Information Regulator (inforegulator.org.za), or to your local data-protection authority if you are in the EU or UK.

Children

PeakSteps is written for adult men and is not meant for anyone under 16. We do not knowingly collect data from children. If you think a child has an account, tell us and we will remove it.

Security

Traffic between the app and our services is encrypted in transit. The cloud record is locked to your account by server rules that are tested. The strongest protection is structural: the most personal things in this app never travel, so they cannot leak.

This website

peaksteps.app sets no cookies and runs no analytics or ad trackers. Our web host keeps standard server logs (IP address, time, page requested) for security, for a short period.

Changes

If we change what the app collects, we update this page in the same release and change the date at the top. Material changes are flagged in the app.

Contact

Questions about this policy or your data go to the Information Officer. We answer them ourselves.

The Information Officer, Peak Software (Pty) Ltd: support@peaksteps.app

Peak Software (Pty) Ltd · South Africa · support@peaksteps.app